API changelog

# API changelog

## 2026-05-23 — Stage 2 §7

- Initial publication of the developer portal at `/developers`.
- Canonical schemas for `LeadCreate`, `CalculateInput`, `CalculateResponse`, `RateSheetCreate`, `WebhookLeadReceived`.
- HMAC-SHA-256 webhook signing helper at `lib/api/schemas/webhooks.ts` (single source of truth for the docs sample + the runtime route handlers).
- Documented rate limits: 100 req/min on `/v1/calculate`, 30/min on `/v1/sheets`, 100/min on `/v1/leads`, 10/min on `/v1/leads/list`.

## Unreleased

- `/v1/sheets`, `/v1/leads` and webhook subscriptions are **not live yet** — requests to those endpoints return 404, and no webhooks are delivered. Their docs pages are marked "Coming soon" and describe the planned contract. They will land alongside the §9 CRM connector work.

## 2026-09-17 — Corrections

- `/v1/calculate` is limited to **100 requests/hour** per key, as enforced (and as the rate-limits page already said). The 2026-05-23 entry below listed 100/min in error.
- The 2026-05-23 entry's limits for `/v1/sheets`, `/v1/leads` and `/v1/leads/list` described endpoints that have not shipped; they are withdrawn until those endpoints land.